Yesterday, I asked: Where does the law come in when it comes to our personal data?

Nigeria’s struggle with internet fraud, popularly known as “Yahoo-Yahoo,” has even affected the country’s international digital reputation.

Recent research also points to weak enforcement, limited capacity and low public awareness as continuing challenges.

At the same time, Nigeria’s data-protection framework is developing. The Nigeria Data Protection Act (NDPA’s) 2023 implementation framework marks another step towards turning those legal protections into practical rules for businesses and individuals.

And this is also backed by Section 37 of the 1999 Constitution which provides for the right to privacy and includes data privacy.

The NDPA 2023 influenced by global data-protection standards, including the GDPR, is now the major framework, covering how personal data is processed and protecting the rights of data subjects.

Just recently in July 2026, the Federal High Court affirmed the statutory authority of the Nigeria Data Protection Commission (NDPC) to register Data Controllers and Data Processors of Major Importance.

The case was Emmanuel Harunna v. Nigeria Data Protection Commission, involving, among other things, whether PoS agents could fall within that category.

It made me realise that data protection isn’t just about privacy policies and clicking “Accept.”

There is an entire legal and regulatory framework behind the data we generate every day.

Read More

Timothy Ogele, Data Protection Compliance: Federal High Court Upholds NDPC’S Power to Designate and Register Entities as DCPMIs (Aluko & Oyebode ALN) accessed on September 9 2026

Feyi Ogunade, Yahoo Boys scammers dabble in dark magic (ENACT Observer, Institute for Security Studies, 22 August 2024)  accessed 09 September 2026.

Kodichi Anigbogu, From principles to practice: Operationalizing Nigeria’s Data Protection Act through the GAID (IAPP, 23 February 2026)  accessed 10 September 2026.

Anyone can visit the Nigeria Data Protection Commission, ‘Resources’ (NDPC)

#10DaysVisibilityChallenge #DataPrivacy #InternetLaw #LawAndTechnology #ljl10daysvisibilitychallenge